Medium DynamoDB Regional

DynamoDB Accelerator (DAX) clusters should be encrypted at rest

NISTISO 27001

Description

Verifies that DAX clusters are encrypted at rest, reducing the risk of unauthorized access to data stored on disk.


Remediation

To enable encryption at rest for DAX clusters, you must recreate the cluster with encryption enabled.

Steps

  1. Open the DAX console.
  2. Recreate the cluster with encryption at rest enabled.

Compliance

NISTISO 27001